Expose firewall port and chat redirect

hosts/dingserver/caddy.nix

@@ -25,8 +25,11 @@
         extraConfig = ''
           header /.well-known/* "Access-Control-Allow-Origin" "*"
           respond /.well-known/matrix/client "{\"m.homeserver\": {\"base_url\": \"https://broccoli.town\"}}"
+
           reverse_proxy /_matrix/* http://localhost:8008
           reverse_proxy /_synapse/client/* http://localhost:8008
+
+          redir / https://chat.broccoli.town
         '';
       };
 

hosts/dingserver/configuration.nix

@@ -22,8 +22,16 @@
   boot.loader.grub.version = 2;
   boot.loader.grub.device = "/dev/sda"; # or "nodev" for efi only
 
-  networking.hostName = "dingserver";
-  networking.interfaces.ens3.useDHCP = true;
+  networking = {
+    hostName = "dingserver";
+    interfaces.ens3.useDHCP = true;
+
+    firewall.interfaces = {
+      "tailscale0" = {
+        allowedUDPPorts = [ 41641 ];
+      };
+    };
+  };
 
   environment.systemPackages = with pkgs; [
     helix